<?php
/**
 * Handle all the redirects and hidden paths
 * Rewrite Class
 *
 * @file The Rewrites file
 * @package HMWP/Rewrite
 * @since 4.0.0
 */

defined( 'ABSPATH' ) || die( 'Cheating uh?' );

class HMWP_Controllers_Rewrite extends HMWP_Classes_FrontController {
	/**
	 * HMWP_Controllers_Rewrite constructor.
	 *
	 * @throws Exception
	 */
	public function __construct() {
		parent::__construct();

		// If the plugin is set to be deactivated, return
		if ( defined( 'HMWP_DISABLE' ) && HMWP_DISABLE ) {
			return;
		}

		// If doing cron, don't load buffer or change paths
		if ( HMWP_Classes_Tools::isCron() ) {
			add_filter( 'hmwp_process_init', '__return_false' );
		}

        // If plugin paused from plugins
		if ( get_transient( 'hmwp_disable' ) ) {
            return;
        }

		// Init the main hooks
		// Start HMWP path process
		$this->initHooks();

		// Start Tweaks Hooks
		$this->initTweaks();
	}

	/**
	 * Initializes the main hooks for the plugin.
	 *
	 * This method sets up various filters and actions to handle plugin functionality,
	 * including URL management, compatibility checks, security filters, and buffer initialization.
	 *
	 * @return void
	 * @throws Exception
	 */
	public function initHooks() {

		// If the mod_rewrite is not set in Apache, return
		if ( HMWP_Classes_Tools::isApache() && ! HMWP_Classes_Tools::isModeRewrite() ) {
			return;
		}

		// If safe parameter is set, clear the banned IPs and let the default paths
		if ( HMWP_Classes_Tools::calledSafeUrl( ) ) {
			HMWP_Classes_ObjController::getClass( 'HMWP_Models_Bruteforce_Database' )->clearBlockedIPs();

			// Check and set the cookies for the modified urls even is safe URL is called
			HMWP_Classes_ObjController::getClass( 'HMWP_Models_Cookies' );

			add_filter( 'site_url', array( $this->model, 'site_url' ), PHP_INT_MAX, 2 );
			add_filter( 'hmwp_process_init', '__return_false' );

			return;
		}

		// Prevent slow websites due to misconfiguration in the config file
		if ( count( (array) HMWP_Classes_Tools::getOption( 'file_mappings' ) ) > 0 ) {
			// If the process to prevent broken frontend is set to true, disable the path change
			if ( HMWP_Classes_Tools::getOption( 'prevent_slow_loading' ) ) {
				// Disable the path change and hiding the path
				// Load default paths but let login page to be processed
				add_filter( 'hmwp_process_hide_urls', '__return_false' );
				add_filter( 'hmwp_process_buffer', '__return_false' );
				add_filter( 'hmwp_process_find_replace', '__return_false' );
			}

		}

		// Check the whitelist IPs & Paths for accessing the hide paths
		/** @var HMWP_Models_Firewall_Rules $firewallRules */
		$firewallRules = HMWP_Classes_ObjController::getClass( 'HMWP_Models_Firewall_Rules' );
		$firewallRules->checkWhitelistIPs();
		$firewallRules->checkWhitelistPaths();

		// Load the compatibility class when the plugin loads
		// Check boot compatibility for some plugins and functionalities
		HMWP_Classes_ObjController::getClass( 'HMWP_Models_Compatibility' )->checkCompatibility();

		// Stop here if the option is default.
		// The previous code is needed for settings change and validation
		if ( HMWP_Classes_Tools::getOption( 'hmwp_mode' ) == 'default' ) {
			return;
		}

		// Don't let to rename and hide the current paths if logout is required
		if ( HMWP_Classes_Tools::getOption( 'error' ) || HMWP_Classes_Tools::getOption( 'logout' ) ) {
			return;
		}

		// Check if the custom paths ar set to be processed
		if ( ! apply_filters( 'hmwp_process_init', true ) ) {
			return;
		}

		// Rename the author if set so
		add_filter( 'author_rewrite_rules', array( $this->model, 'author_url' ), PHP_INT_MAX, 1 );

		// Filters
		add_filter( 'query_vars', array( $this->model, 'addParams' ), 1, 1 );
		add_filter( 'login_redirect', array( $this->model, 'sanitize_login_redirect' ), 9, 3 );
		add_filter( 'wp_redirect', array( $this->model, 'sanitize_redirect' ), PHP_INT_MAX, 2 );
		add_filter( 'x_redirect_by', '__return_false', PHP_INT_MAX, 1 );

		// Redirect based on the current user role
		if ( HMWP_Classes_Tools::getOption( 'hmwp_do_redirects' ) ) {
			add_action( 'wp_login', array( $this->model, 'wp_login' ), PHP_INT_MAX, 2 );
			add_action( 'set_current_user', array( 'HMWP_Classes_Tools', 'setCurrentUserRole' ), PHP_INT_MAX );
			add_filter( 'hmwp_url_login_redirect', array( 'HMWP_Classes_Tools', 'getCustomLoginURL' ), 10, 1 );
			add_filter( 'hmwp_url_logout_redirect', array( 'HMWP_Classes_Tools', 'getCustomLogoutURL' ), 10, 1 );
			add_filter( 'woocommerce_login_redirect', array( 'HMWP_Classes_Tools', 'getCustomLoginURL' ), 10, 1 );
		}

		// Custom hook for WPEngine
		if ( HMWP_Classes_Tools::isWpengine() ) {
			add_filter( 'wp_redirect', array( $this->model, 'loopCheck' ), PHP_INT_MAX, 1 );
		}

		// Actions
		add_action( 'login_init', array( $this->model, 'login_init' ), PHP_INT_MAX );
		add_action( 'login_head', array( $this->model, 'login_head' ), PHP_INT_MAX );
		add_action( 'wp_logout', array( $this->model, 'wp_logout' ), PHP_INT_MAX );
		add_action( 'check_admin_referer', array( $this->model, 'check_admin_referer' ), PHP_INT_MAX, 2 );

		// Change the admin url hmwp_login_init
		// Change wp-admin path only when the rules are working through the config file
		if( empty( (array) HMWP_Classes_Tools::getOption( 'file_mappings' ) ) ) {
			add_filter( 'admin_url', array( $this->model, 'admin_url' ), PHP_INT_MAX, 3 );
		}
		add_filter( 'login_title', array( $this->model, 'login_title' ), PHP_INT_MAX, 1 );
		add_filter( 'lostpassword_url', array( $this->model, 'lostpassword_url' ), PHP_INT_MAX, 1 );
		add_filter( 'register', array( $this->model, 'register_url' ), PHP_INT_MAX, 1 );
		add_filter( 'login_url', array( $this->model, 'login_url' ), PHP_INT_MAX, 1 );
		add_filter( 'logout_url', array( $this->model, 'logout_url' ), PHP_INT_MAX, 2 );
		add_filter( 'network_admin_url', array( $this->model, 'network_admin_url' ), PHP_INT_MAX, 3 );
		add_filter( 'home_url', array( $this->model, 'home_url' ), PHP_INT_MAX, 3 );
		add_filter( 'site_url', array( $this->model, 'site_url' ), PHP_INT_MAX, 3 );
		add_filter( 'network_site_url', array( $this->model, 'site_url' ), PHP_INT_MAX, 3 );
		add_filter( 'plugins_url', array( $this->model, 'plugin_url' ), PHP_INT_MAX, 3 );

		add_filter( 'wp_php_error_message', array( $this->model, 'replace_error_message' ), PHP_INT_MAX, 2 );
		// Change the rest api if needed
		add_filter( 'rest_url_prefix', array( $this->model, 'replace_rest_api' ), 1 );

		// Check and set the cookies for the modified urls
		HMWP_Classes_ObjController::getClass( 'HMWP_Models_Cookies' );

		// Start the buffer sooner if one of these conditions
		// If is an ajax call... start the buffer right away
		// Ts always change the paths
		if ( HMWP_Classes_Tools::isAjax() || HMW_ALWAYS_CHANGE_PATHS ) {

			// Start the buffer
			$this->model->startBuffer();

		}

		// If not dashboard
		if ( ! is_admin() && ! is_network_admin() ) {

			// Check if buffer priority
			if ( apply_filters( 'hmwp_priority_buffer', HMWP_Classes_Tools::getOption( 'hmwp_priorityload' ) ) ) {
				// Starts the buffer
				$this->model->startBuffer();
			}

			// Hook the rss & feed
			if ( HMWP_Classes_Tools::getOption( 'hmwp_hide_in_feed' ) ) {
				add_action( 'the_excerpt_rss', array( $this->model, 'find_replace' ) );
				add_action( 'the_content_feed', array( $this->model, 'find_replace' ) );
				add_action( 'rss2_head', array( $this->model, 'find_replace' ) );
				add_action( 'commentsrss2_head', array( $this->model, 'find_replace' ) );
				add_action( 'the_permalink_rss', array( $this->model, 'find_replace_url' ) );
				add_action( 'comments_link_feed', array( $this->model, 'find_replace_url' ) );
				add_action( 'get_site_icon_url', array( $this->model, 'find_replace_url' ) );
			}

			// Hide WP version
			if ( HMWP_Classes_Tools::getOption( 'hmwp_hide_version' ) ) {
				add_filter( 'get_the_generator_atom', '__return_empty_string', 99, 2 );
				add_filter( 'get_the_generator_comment', '__return_empty_string', 99, 2 );
				add_filter( 'get_the_generator_export', '__return_empty_string', 99, 2 );
				add_filter( 'get_the_generator_html', '__return_empty_string', 99, 2 );
				add_filter( 'get_the_generator_rdf', '__return_empty_string', 99, 2 );
				add_filter( 'get_the_generator_rss2', '__return_empty_string', 99, 2 );
				add_filter( 'get_the_generator_xhtml', '__return_empty_string', 99, 2 );
			}

			// Check the buffer on shutdown
			if ( HMWP_Classes_Tools::getOption( 'hmwp_hide_in_sitemap' ) && isset( $_SERVER['REQUEST_URI'] ) ) {

				// remove sitemap providers
				if ( HMWP_Classes_Tools::getOption( 'hmwp_hide_author_in_sitemap' ) ) {
					add_filter('wp_sitemaps_add_provider', function($provider, $name) {
						if ($name === 'users') {
							return false;
						}
						return $provider;
					}, 99, 2);
				}

				// Check the buffer on shutdown
				add_action( 'shutdown', array( $this->model, 'findReplaceXML' ), 0 ); //priority 0 is important
			}

			// Hide authors and users identification from website
			if ( HMWP_Classes_Tools::getOption( 'hmwp_hide_author_enumeration' ) ) {

				// Remove users from oembed
				add_filter('oembed_response_data', function ($data, $post, $width, $height) {
					unset($data['author_name']);
					unset($data['author_url']);
					return $data;
				}, 99, 4);

				// Remove users from Rest API call
				add_filter('rest_endpoints', array( $this->model, 'hideRestUsers' ), 99);

				// Remove user list from sitemaps
				add_filter( 'wp_sitemaps_users_pre_url_list', '__return_false', 99, 0 );
			}

			// Robots.txt compatibility with other plugins
			if ( isset($_SERVER['REQUEST_URI']) ){
				$banlist = HMWP_Classes_Tools::getOption('banlist_user_agent');

				if ( ! is_array( $banlist ) ) {
					$banlist = json_decode( $banlist, true );
					$banlist = is_array($banlist) ? $banlist : array();
				}

				if ( HMWP_Classes_Tools::getOption('hmwp_robots') || ! empty($banlist) )  {
					// Compatibility with
					if ( strpos( $_SERVER['REQUEST_URI'], '/robots.txt' ) !== false ) { //phpcs:ignore
						add_action( 'shutdown', array( $this->model, 'replaceRobots' ), 0 ); //priority 0 is important
					}
				}
			}

			// Hook the change paths on init
			add_action( 'init', array( $this, 'hookChangePaths' ) );

		}

		// Hide the URLs from admin and login
		// Load the hook on plugins_loaded to prevent any wp redirect
		add_action( 'plugins_loaded', array( $this->model, 'hideUrls' ) );

	}

	/**
	 * Initializes tweak hooks for modifying behavior based on specific conditions.
	 *
	 * @return void
	 */
	public function initTweaks() {

		// If not dashboard
		if ( ! is_admin() && ! is_network_admin() ) {
			// Load the PluginLoaded Hook to hide URLs and Disable stuff
			add_action( 'init', array( $this, 'hookHideDisable' ) );


			// Apply login page customization styles
			if ( HMWP_Classes_Tools::getOption('hmwp_login_page') ) {

				// Remove the third hooks and load the styles from the login page
				add_filter( 'hmwp_option_hmwp_remove_third_hooks', '__return_true' );

				/** HMWP_Models_Login $login  */
				$login = HMWP_Classes_ObjController::getClass( 'HMWP_Models_Login' );
				add_action( 'login_enqueue_scripts', array( $login, 'hookLoginPageStyles' ) );
				add_action( 'login_footer', array( $login, 'hookLoginSpinner' ) );

				// Remove WordPress link + text
				add_filter('login_headerurl', function () {
					return home_url();
				});

				add_filter('login_headertext', function () {
					return get_bloginfo('name');
				});

				// Apply login page logo url
				if ( HMWP_Classes_Tools::getOption( 'hmwp_login_page_logo_url' ) ) {
					/** HMWP_Models_Login $login  */
					$login = HMWP_Classes_ObjController::getClass( 'HMWP_Models_Login' );
					add_filter( 'login_headerurl', array( $login, 'hookLoginLogoUrl' ) );
				}
			}
		}

	}

	/**
	 * Hook the Hide & Disable options
	 *
	 * @throws Exception
	 */
	public function hookHideDisable() {

		// Check if is valid for moving on
		if ( HMWP_Classes_Tools::doHideDisable() ) {
			//////////////////////////////////Hide Options

			// Add the security header if needed
			if ( ! HMWP_Classes_Tools::isApache() && ! HMWP_Classes_Tools::isLitespeed() ) {
				// Avoid duplicates
				add_action( 'template_redirect', array( $this->model, 'addSecurityHeader' ), PHP_INT_MAX );
			}

			// Remove PHP version, Server info, Server Signature from header.
			add_action( 'template_redirect', array( $this->model, 'hideHeaders' ), PHP_INT_MAX );

			// Hide the WordPress Generator tag
			if ( HMWP_Classes_Tools::getOption( 'hmwp_hide_generator' ) ) {
				remove_action( 'wp_head', 'wp_generator' );
				add_filter( 'the_generator', '__return_false', PHP_INT_MAX, 1 );
			}

			// Hide the rest_api
			if ( HMWP_Classes_Tools::getOption( 'hmwp_hide_rest_api' ) || HMWP_Classes_Tools::getOption( 'hmwp_disable_rest_api' ) ) {
				$this->model->hideRestApi();
			}

			// Hide Really Simple Discovery
			if ( HMWP_Classes_Tools::getOption( 'hmwp_hide_rsd' ) ) {
				$this->model->disableRsd();
			}

			// Hide WordPress comments
			if ( HMWP_Classes_Tools::getOption( 'hmwp_hide_comments' ) ) {
				$this->model->disableComments();
			}

			// Hide Windows Live Write
			if ( HMWP_Classes_Tools::getOption( 'hmwp_disable_manifest' ) ) {
				$this->model->disableManifest();
			}

			//////////////////////////////////Disable Options

			// Disable the Emoji icons tag
			if ( HMWP_Classes_Tools::getOption( 'hmwp_disable_emojicons' ) ) {
				$this->model->disableEmojicons();
			}


			// Disable the embeds
			if ( HMWP_Classes_Tools::getOption( 'hmwp_disable_embeds' ) ) {
				$this->model->disableEmbeds();
			}

			// Disable the admin bar whe users are hidden in admin
			// Only if the config file is working correctly
			if ( empty( (array) HMWP_Classes_Tools::getOption( 'file_mappings' ) ) || HMWP_Classes_Tools::isLoggedInUser() ) {

				HMWP_Classes_Tools::setCurrentUserRole();
				$role = HMWP_Classes_Tools::getUserRole();

				$selected_roles = (array) HMWP_Classes_Tools::getOption( 'hmwp_hide_admin_toolbar_roles' );

				if ( in_array( $role, $selected_roles ) ) {
					add_filter( 'show_admin_bar', '__return_false' ); //phpcs:ignore
				}

			}

			// Disable Database Debug
			if ( HMWP_Classes_Tools::getOption( 'hmwp_disable_debug' ) ) {
				global $wpdb;
				$wpdb->hide_errors();
			}

		}

		// Check if Disable keys and mouse action is on
		if ( HMWP_Classes_Tools::doDisableClick() ) {

			// Only disable the click and keys for visitors
			if ( ! HMWP_Classes_Tools::isLoggedInUser() ) {
				HMWP_Classes_ObjController::getClass( 'HMWP_Models_Clicks' );
			} else {

				HMWP_Classes_Tools::setCurrentUserRole();
				$role = HMWP_Classes_Tools::getUserRole();

				if ( HMWP_Classes_Tools::getOption( 'hmwp_disable_click_loggedusers' ) ) {
					$selected_roles = (array) HMWP_Classes_Tools::getOption( 'hmwp_disable_click_roles' );

					if ( ! in_array( $role, $selected_roles ) ) {
						add_filter( 'hmwp_option_hmwp_disable_click', '__return_false' );
					}

				} else {
					add_filter( 'hmwp_option_hmwp_disable_click', '__return_false' );
				}

				if ( HMWP_Classes_Tools::getOption( 'hmwp_disable_inspect_loggedusers' ) ) {
					$selected_roles = (array) HMWP_Classes_Tools::getOption( 'hmwp_disable_inspect_roles' );

					if ( ! in_array( $role, $selected_roles ) ) {
						add_filter( 'hmwp_option_hmwp_disable_inspect', '__return_false' );
					}
				} else {
					add_filter( 'hmwp_option_hmwp_disable_inspect', '__return_false' );
				}

				if ( HMWP_Classes_Tools::getOption( 'hmwp_disable_source_loggedusers' ) ) {
					$selected_roles = (array) HMWP_Classes_Tools::getOption( 'hmwp_disable_source_roles' );

					if ( ! in_array( $role, $selected_roles ) ) {
						add_filter( 'hmwp_option_hmwp_disable_source', '__return_false' );
					}
				} else {
					add_filter( 'hmwp_option_hmwp_disable_source', '__return_false' );
				}

				if ( HMWP_Classes_Tools::getOption( 'hmwp_disable_copy_paste_loggedusers' ) ) {
					$selected_roles = (array) HMWP_Classes_Tools::getOption( 'hmwp_disable_copy_paste_roles' );

					if ( ! in_array( $role, $selected_roles ) ) {
						add_filter( 'hmwp_option_hmwp_disable_copy_paste', '__return_false' );
					}
				} else {
					add_filter( 'hmwp_option_hmwp_disable_copy_paste', '__return_false' );
				}

				if ( HMWP_Classes_Tools::getOption( 'hmwp_disable_drag_drop_loggedusers' ) ) {
					$selected_roles = (array) HMWP_Classes_Tools::getOption( 'hmwp_disable_drag_drop_roles' );

					if ( ! in_array( $role, $selected_roles ) ) {
						add_filter( 'hmwp_option_hmwp_disable_drag_drop', '__return_false' );
					}
				} else {
					add_filter( 'hmwp_option_hmwp_disable_drag_drop', '__return_false' );
				}

				//check again if the options are active after the filter are applied
				if ( HMWP_Classes_Tools::getOption( 'hmwp_disable_click' ) || HMWP_Classes_Tools::getOption( 'hmwp_disable_inspect' ) || HMWP_Classes_Tools::getOption( 'hmwp_disable_source' ) || HMWP_Classes_Tools::getOption( 'hmwp_disable_copy_paste' ) || HMWP_Classes_Tools::getOption( 'hmwp_disable_drag_drop' ) ) {

					HMWP_Classes_ObjController::getClass( 'HMWP_Models_Clicks' );

				}

			}

		}
	}


	/**
	 * Hook the Change Paths process
	 *
	 * @throws Exception
	 */
	public function hookChangePaths() {

		if ( ! HMWP_Classes_Tools::getValue( 'hmwp_preview' ) ) {

			// If not frontend preview/testing
			if ( (HMWP_Classes_Tools::getOption( 'hmwp_mapping_text_show' ) && HMWP_Classes_Tools::getOption( 'hmwp_mapping_file' )) || count( (array) HMWP_Classes_Tools::getOption( 'file_mappings' ) ) > 0 ) {

				// Load MappingFile Check the Mapping Files
				// Check the mapping file in case of config issues or missing rewrites
				HMWP_Classes_ObjController::getClass( 'HMWP_Models_Files' )->maybeShowFile();

			}

			// In case of broken URL, try to load it
			// Priority 1 is working for broken files
			add_action( 'template_redirect', array( HMWP_Classes_ObjController::getClass( 'HMWP_Models_Files' ), 'maybeShowNotFound' ), 1 );

		}

		// Check Compatibilities with other plugins
		HMWP_Classes_ObjController::getClass( 'HMWP_Models_Compatibility' )->checkBuildersCompatibility();

		///////////////////////////////////////////////
		/// Check if changing the paths is true
		if ( HMWP_Classes_Tools::doChangePaths() ) {
			$priority = apply_filters( 'hmwp_priority_hook', 1 );

			// If there is late loading, start the buffer on template_redirect PHP_INT_MAX
			if ( apply_filters( 'hmwp_laterload', HMWP_Classes_Tools::getOption( 'hmwp_laterload' ) ) ) {
				// On Late loading, start the buffer on template_redirect
				$priority = apply_filters( 'hmwp_priority_hook', PHP_INT_MAX );
			}

			// Start the buffer on template_redirect
			add_action( 'template_redirect', array( $this->model, 'startBuffer' ), $priority  );

			// For login page
			add_action( 'login_init', array( $this->model, 'startBuffer' ) );

		}
	}

	/**
	 *  On Admin Init
	 *  Load the Menu
	 *  If the user changes the Permalink to default ... prevent errors
	 *
	 * @throws Exception
	 */
	public function hookInit() {

		// If the user changes the Permalink to default ... prevent errors
		if ( HMWP_Classes_Tools::userCan( HMWP_CAPABILITY ) && HMWP_Classes_Tools::getValue( 'settings-updated' ) ) {
			if ( 'default' <> HMWP_Classes_Tools::getOption( 'hmwp_mode' ) ) {
				$this->model->flushChanges();
			}
		}

		// Show the menu for admins only
		HMWP_Classes_ObjController::getClass( 'HMWP_Controllers_Menu' )->hookInit();

	}

}